Dragonforce
From extortion.wiki, the ransomware notes archive
2 archived notes associated with the upstream family directory dragonforce. The family label follows ThreatLabz; any link to negotiation records uses an explicit archive alias mapping.
Archived note files
2 supported · 0 skipped| Original filename | File type | Content hash | Source | Internal archive |
|---|---|---|---|---|
| [rand].README.txt | Plain text (.txt) | b587682d8b1dc95b… | Upstream file | Read archived source |
| readme.xt | Plain text (.xt) | e3c8c6f872eda644… | Upstream file | Read archived source |
Negotiation records
Threat actor page: DragonforceAn explicit archive alias maps the ThreatLabz family Dragonforce to the Ransomchats actor label Dragonforce. Note and negotiation counts remain separate.
| Participants | Source | Archive status | |||
|---|---|---|---|---|---|
| Not recorded | 058f4b92-ae99-45c7-bf35-5d2d6754b3de | 19 | DragonForce, Victim | JSON | Indexed |
| Not recorded | 05f724f8-906e-4739-8177-815852cc2c3f | 29 | DragonForce, Victim | JSON | Indexed |
| Not recorded | 29BBE03074FDBB8D | 10 | dragonforce, victim, Victim | JSON | Indexed |
| Not recorded | 7A313D13EB6B4E58 | 32 | Attacker, Victim | JSON | Indexed |
| Not recorded | 89716D29D2CEE36F | 23 | DragonForce, Victim | JSON | Indexed |
| Not recorded | AB0404E049514B50 | 28 | Attacker, Victim | JSON | Indexed |
| Not recorded | b8e14e1a-548f-4eec-bd6e-a590126e57c9 | 14 | threat_actor, Victim | JSON | Indexed |
| Not recorded | BD004D632D87DBA0 | 25 | DragonForce, Victim | JSON | Indexed |
| Not recorded | C2A3C7249797F5ED | 66 | dragonforce, victim | JSON | Indexed |
| Not recorded | C42CDF65B97D0E92 | 30 | dragonforce, victim | JSON | Indexed |
| Not recorded | C7CD31EAAF9DE9AC | 71 | Attacker, Victim | JSON | Indexed |
| Not recorded | C8479B30418B331E | 4 | Attacker, Victim | JSON | Indexed |
| Not recorded | D6DDD9B26D7D41DB | 14 | Attacker, Victim | JSON | Indexed |
| Not recorded | FDA8141B6DD392E3 | 10 | DragonForce, Victim | JSON | Indexed |
Dataset provenance and citation
| Upstream collector | Zscaler ThreatLabz |
|---|---|
| Source repository | ThreatLabz/ransomware_notes |
| Source directory | dragonforce |
| Snapshot commit | 2bbf5b4ecda84837c4a71af1a99c6821920f051a |
| Dataset snapshot | Jun 26, 2026, 10:27 PM |
| Synchronization time | Jul 22, 2026, 11:47 AM |
| Source status | Complete |
| License | MIT; preserved notice |
| Stable internal citation | extortion.wiki. Dragonforce ransomware notes. ThreatLabz/ransomware_notes snapshot 2bbf5b4ecda84837c4a71af1a99c6821920f051a. https://extortion.wiki/notes/dragonforce/. |